Electronic purse card value system card security method

ABSTRACT

An electronic purse card value system ( 10 ) includes terminal devices ( 12 ). Each terminal device includes a processor ( 26 ) which is in operative connection with a memory ( 28 ) and a modem ( 36 ). The processor is further in operative connection with components of the terminal device including a customer interface ( 14 ) through which inputs are accepted and outputs are delivered, a card reader ( 22 ) and a printing device ( 30,34 ). The terminal devices are operative to communicate with host computers ( 42,44,46 ) through a communication system ( 38 ). The system is operative to carry out transactions in which data representative of value is loaded and unloaded from integrated circuit chips on customer cards ( 24 ). Data representative of value is stored in the memories of the cards such that certain value amounts are stored in one memory area while other value amounts are stored in a second memory area. A third amount is calculated which is a function of both the value amounts in the first and second memory areas and the third value is stored in memory on the card.

This application claims the benefit of U.S. Provisional Application No.60,044,423 filing date Apr. 29, 1997.

TECHNICAL FIELD

This invention relates to systems for carrying out financialtransactions electronically. Specifically, this invention relates to asystem which loads and unloads data representative of cash value to andfrom an integrated circuit bearing card, which card may be used by acard bearer to obtain goods, services or other items of value. Thesystem of the present invention enables the card bearer to debit thecash value loaded on to the card from a bank account associated with thecard or to debit or charge the value to other accounts associated withdifferent cards.

BACKGROUND ART

Transaction processing systems have been developed which enableconsumers to obtain. goods or services by using credit or debit cards.Credit cards are used by a consumer to charge against an account for thegoods or services being provided. When using a credit card, the consumerlater pays the credit card issuer for the amount charged. A commonexample of a credit card is the VISA® card provided by VISAInternational.

Debit cards may also be used by consumers to pay for goods or services.A debit card is associated with a bank account maintained by theconsumer. When a consumer uses a debit card to pay for goods orservices, the amount of the transaction is deducted from the consumer'saccount.

Electronic credit and debit card terminals have been developed whichfacilitate the processing of debit and credit card transactions.Merchants generally have these terminals at a point of sale of goods orservices. Such terminals are connected through telephone or other datalines to computer networks which process and keep accounts oftransactions. When a consumer purchases goods or services at a point ofsale the consumer's account may be charged if a credit card is used andthe merchant's account may be credited. Similarly, if a debit card isused to pay for the purchase, the consumers account is debited for theamount of the purchase and the merchant's account is credited.

Such point of sale (POS) terminals often keep a record of thetransactions in memory. Periodically the terminal is connected via dataline to a computer called a settlement host which receives a record ofall the transactions that have been conducted. The settlement hostoperates to make sure that the merchant's account is properly creditedfor all of the transactions that have been carried out at the terminal.

The vast majority of credit and debit cards in use in the United Statestoday contain information on the customer account associated with thecard. This information is presented in two forms. The account numberassociated with the customer's account is presented in raised numeralson the card along with the customer's name and certain otherinformation. This enables a merchant to mechanically make an impressionof the account data on a multi-part form. The other way in which accountinformation is generally provided is by encoding the account informationon a magnetic stripe on the back of the card. The magnetic stripe mayhave up to three data bearing tracks which includes data representativeof the customer's account number, name and other data.

Conventionally, the account number data on a customer's card includes anumeric identifier which identifies the card issuer and/or the bankwhich issued the card. This account number data, which is generallyreferred to as a primary account number or “PAN” contains sufficientinformation to identify the card issuer and the account. Often,particularly in the case of debit cards, the account number includes abank institution number or “BIN” which identifies a particular bank.Electronic financial processing networks have been developed whichenable the routing of the transaction messages based on the cardinformation so that the appropriate accounts are charged and credited.

In recent years, integrated circuit cards have been developed. Thesecards are often referred to as “smart cards”. Integrated circuit cardsare similar to conventional debit and credit cards, except that theyadditionally include an integrated circuit chip. The integrated circuitchip is used to store data related to the customer and his or heraccount. The integrated circuit chip often includes encryption programsand stored data which are used to correlate card information with apersonal identification number or PIN which a customer may input in atransaction terminal. This correlation is used to provide authenticationthat the bearer is the proper user of the card.

Integrated circuit type chip cards also generally include data in memoryrepresentative of cash value. This cash value data is stored on thecard. This value may be used in the same manner as cash by the cardbearer to purchase goods or services.

Terminals have been developed which read the data included on theintegrated circuit and which change the stored data to represent anaddition or subtraction of cash value. Merchants who have such terminalsmay accept a customer's integrated circuit card as payment by reducingthe value data stored on the card.

Systems involving the use of integrated circuit cards have not been usedextensively in the United States due to a lack of available systems forprocessing such transactions. Before integrated circuit cards may gainwide acceptance there must be a means of loading the data representativeof value on to the integrated circuit card. Ideally such loading must bedone conveniently from a consumer's other accounts. In addition, wideacceptance of such cards requires the development of systems forsettlement between entities which charge a consumer for the value loadedon the card and the merchants who reduce the value data on theintegrated circuit card in payment for goods or services.

Thus, there exists a need for a system which is capable of loading andunloading data representative of value on to an integrated circuit cardin which the value is taken from and returned to sources of fundsassociated with credit or debit cards. There further exists a need for asystem which provides settlement between entities involved in transfersof cash value to and from the card users, which value is represented bydata stored on the integrated circuit cards.

DISCLOSURE OF INVENTION

It is an object of the present invention to provide an electronic pursecard value system.

It is a further object of the present invention to provide an electronicpurse card value system for use in connection with integrated circuitcards.

It is a further object of the present invention to provide an electronicpurse card value system which includes a terminal device for loading andunloading data representative of value from an integrated circuit card.

It is a further object of the present invention to provide an electronicpurse card value system which includes novel electronic transactionmessage formats.

It is a further object of the present invention to provide an electronicpurse card value system that includes novel electronic messagesettlement formats.

It is a further object of the present invention to provide methods foroperating an electronic purse card value system.

Further objects of the present invention will be made apparent in thefollowing Best Modes for carrying out invention and the appended claims.

The foregoing objects are accomplished in a preferred embodiment of thepresent invention by an electronic purse card value system whichincludes at least one terminal device. The terminal device accepts anintegrated circuit card which includes an integrated circuit thereonwhich is enabled to store data representative of value. Hereinafterintegrated circuit cards are alternatively referred to as “smart cards”,“stored value cards” or “SVCs”. A stored value card accepted by theterminal device also preferably has thereon a magnetic stripe whichcarries indicia such as magnetically encoded credit card or debit carddata.

The terminal device preferably includes a modem to enable selectivecommunication between the terminal device and a plurality of hostcomputers. The terminal device is programmed to connect to a particularhost computer responsive to data included on a customer's card toprocess card transactions. The terminal is further configured to connectto a settlement host computer to transmit records of the transactionscarried out at the terminal for settlement purposes.

The preferred embodiment of the terminal of the present inventionenables a customer to load and unload value to and from a stored valuecard, respectively. The customer is enabled to load value from selectedcharge accounts or bank accounts. These accounts include a particularaccount associated with the card to which value is to be loaded, as wellas accounts associated with other credit or debit cards. Similarly, thecustomer is enabled to unload value from the stored value card and tohave the unloaded value credited to an account associated with thestored value card, or a different account card.

The preferred embodiment of the terminal device of the present inventionalso enables a consumer to make balance inquiries concerning the amountof cash value stored in memory on a stored value card. The customer isalso enabled to make account balance inquiries related to various otheraccounts. This may be a bank account or charge account associated withthe stored value card or accounts associated with other cards. Theterminal device of the present invention is also capable of carrying outadministrative functions as well as settlement functions in the system.

BRIEF DESCRIPTION OF DRAWINGS

FIG. 1 is a schematic view of the electronic purse card value system ofthe present invention.

FIG. 2 is a schematic view of the customer interface of the terminaldevice of the electronic purse card value system.

FIG. 3 is a table of the data elements among the configurable data forthe terminal device of the electronic purse card value system.

FIG. 4 is a table including descriptions of the data elements shown inFIG. 3.

FIGS. 5 through 15 are a schematic representation of the transactionflow and associated screen displays for the operation of the terminaldevice.

FIG. 16 is an example of a receipt for a load transaction carried outusing the terminal device.

FIG. 17 is a sample unload receipt for an unload transaction carried outusing the terminal device.

FIG. 18 is a sample receipt for a balance inquiry on a stored value cardcarried out using the terminal device.

FIG. 19 is a sample receipt for a balance inquiry concerning an accountassociated with a card carried out using the terminal device.

FIG. 20 is a schematic view of the message flows for messages passedbetween the terminal device and an ATM host in the electronic purse cardvalue system of the invention.

FIGS. 21 and 22 are a table showing the format and content of a requestmessage transmitted between the terminal device and the ATM host in thesystem of the present invention.

FIG. 23 is a table showing the format and content of a response message.

FIG. 24 is a table showing the format and content of a completionmessage.

FIG. 25 is a table showing the format and content of a poll message.

FIG. 26 is a schematic view of the message flows between the terminaldevice and a settlement host in the electronic purse card value systemof the present invention.

FIG. 27 is a table showing the layout of a settlement messagetransmitted from the terminal device to the settlement host.

FIG. 28 is a table showing the format and content layout of a batchheader included in a settlement message.

FIGS. 29 and 30 are a table showing the format and content layout ofcard issuance and refund transaction records transmitted between theterminal device and the settlement host.

FIG. 31 is a table showing the format and content layout of a cardissuance/refund batch trailer record included in the settlement message.

FIG. 32 is a table showing the format and content layout of a goods andservices batch header record included in the settlement message.

FIG. 33 is a table showing the format and content layout of a goods andservices transaction record included in the settlement message.

FIG. 34 is a table showing the format and content layout of a goods andservices batch trailer record included in the settlement message.

FIG. 35 is a table showing the format and content layout of a cardreload batch header record included in the settlement message.

FIG. 36 is a table showing the format and content layout of a cardreload transaction record included in the settlement message.

FIG. 37 is a table showing the format and content layout of a cardreload batch trailer record included in the settlement message.

FIGS. 38, 39, 41, 42, 43, 45, 47, 49, 50, 51, 53, 54, 56, 57, 58, 60,61, 63, 64, 66, 67 and 69 are a schematic representation of transactionflow and associated screen displays associated with administrativefunctions carried out by the terminal device of the electronic pursecard value system of the present invention.

FIG. 40 is a table of the administrative functions that are carried outwith the terminal device.

FIGS. 44, 46, 48, 52, 55, 59, 62 and 65 are sample reports printed bythe terminal device in connection with administrative functions carriedout through the terminal device.

FIG. 68 is a table schematically showing configuration data which may bestored on a smart card for configuring the terminal device.

BEST MODES FOR CARRYING OUT INVENTION

Referring now to the drawings and particularly to FIG. 1, there is showntherein an electronic purse card value system of a preferred embodimentof the present invention generally indicated 10. The system includes aplurality of terminal devices one of which is represented by terminaldevice 12. In the preferred form of the invention, terminal device 12 isan iq EPIC™ device produced by Diebold, Incorporated, the assignee ofthe present invention.

Terminal device 12 includes a customer interface schematically indicated14. Customer interface 14 includes a screen 16 which in the preferredform of the invention is a LCD type display. Adjacent to screen 16 areeight manually actuatable function buttons 18, which are indicated F1through F8, respectively. The function buttons are positioned adjacentto the screen to enable a user to respond to prompts and to makeselections in response to date presented on the screen. Customerinterface 14 also includes a keypad 20.

Terminal device 12 also includes a card reader schematically indicated22. In the preferred form of the invention card reader 22 is a cardreader capable of reading both smart cards and magnetic stripe cards,and is a type produced by Mag Tek Incorporated. Card reader 22 acceptscredit and debit cards which include magnetic stripe cards, smart cardsand cards which have both magnetic stripes and integrated circuits, thecards are passed to the reader through an opening on the front fascia ofthe terminal device. One such card is shown in FIG. 1 extending throughthe opening and is schematically indicated 24.

Terminal device 12 further includes a processor schematically indicated26. Processor 26 is in operative connection with a configurable memoryschematically indicated 28. Memory 28 is operative to hold theconfiguration data related to the operation of the terminal devicelisted in FIGS. 3 and 4. Memory 28 also holds programs and datanecessary for operation of the terminal device. Memory 28 is furtheroperative to retain transaction data which is used for purposes ofsettlement as later explained.

Terminal device 12 further includes a receipt printer schematicallyindicated 30. Receipt printer 30 is operative to deliver transactionreceipts to consumers who use the terminal device. Printer 30 is alsoused to print reports which are provided to an operator of the terminalin accordance with the administrative functions which are laterexplained. Receipt printer 30 is operative to deliver its receipts andreports through a receipt opening 32 in the fascia of the terminal. Inthe preferred form of the invention receipt printer 30 is a thermalprinter provided by Axiohm Corporation which provides 24 columns ofprinting. Of course, in other embodiments of the invention, otherprinters may be used.

Terminal device 12 further includes a journal printer schematicallyindicated 34. Journal printer 34 is of a conventional type and providesa hard copy paper record stored within the terminal of transactions thatare carried out at the terminal device. The components of the customerinterface 14, the card reader 22, receipt printer 30 and journal printer34 are all in operative connection with the processor 26 of the terminaldevice.

Terminal device 22 includes a modem schematically indicated 36. Modem 36is in operative connection with the processor 26 and terminal softwaredrivers that operate therein. Modem 36 is preferably a dial up typemodem that is in connection with a phone line schematically indicated38. Phone line 38 is connected to a public telephone systemschematically indicated 40.

Phone system 40 is connected to host computers schematically indicated42, 44 and 46. It should be understood that while only three hostcomputers are shown, any number of host computers may be connected inthe system. Each of the host computers is accessible at a differentaddress within the system and is accessed at a different telephonenumber. As shown in more detail with reference to host computer 46, eachhost computer is in operative connection with a modem 48 which enablesexchange of messages with the terminal device 12. In addition, hostcomputer 46 is in operative connection with a data store 50 which isoperative to hold program and transaction information. It should beunderstood that data store 50 in the preferred embodiment comprisesdatabase software, for example, relational database software provided byOracle Corporation. Such database software may reside on the computer 46or on another computer operatively connected thereto. Each host computeris also preferably in operative connection with an input device 52 asschematically represented by a keyboard, and an output device 54 asschematically represented by a monitor. Of course, in other embodimentsother types of input and output devices may be used.

It should be understood that each host computer 42, 44 and 46 maycomprise a single computer or a plurality of connected computers whichare operatively connected in a network. It should also be understoodthat while in the preferred embodiment the host computers are connectedto the terminal devices through a public phone system, in otherembodiments other types of communications systems may be used. These mayinclude for example dedicated data lines, radio systems and combinationsthereof.

In the preferred embodiment of the invention the cards used inconnection with terminal device 12 include credit or debit cards whichhave magnetic stripe data. This magnetic stripe data is encodedconventionally and includes the customer's name as well as thecustomer's primary account number (PAN). The primary account number inthe case of bank cards includes a bank identification number (BIN) aspart of the customer's account number.

The processor 26 in terminal device 12 also operates to verify acustomer's personal identification number (PIN) when a customer inputs adebit type card into the terminal device. The verification of thecustomer's PIN is accomplished through an algorithm based on thecustomer's primary account number and other data read from the card. Thealgorithm and approach used to verify the customer's PIN is done inaccordance with the programming of the terminal device and is based ondata stored in a financial institution table (FIT). The terminal deviceaccomplishes PIN/card verification based on the bank identification data(BIN) included in the customer's PAN and the programmed approach foraccomplishing PIN/card verification for that BIN stored in connectionwith the FIT table.

Terminal device 12 is also operative to accept cards which includeintegrated circuits thereon. In the preferred embodiment of theinvention, the cards have a EEPROM carried on the card. The EEPROM usedin connection with the preferred embodiment is a Siemens SLE4404 whichprovides a 416 bit memory with an internal PIN check function.

In the preferred embodiment the user memory on the PROM, which is a 206bit area, is used to represent amounts each bit having a fixed value.Generally, these bits are used to represent larger value amounts, suchas dollars, and to accommodate cents data bits in another designatedarea in the memory are used. A 16 bit scratch pad memory on the PROM mayadvantageously be used for this purpose.

In the preferred embodiment a redundancy check is also provided in whicha further value is stored on the card which is a function of the valuestored in each of the memory areas. If the value stored for redundancycheck does not correspond with the values stored in the memories thenext time the card is attempted to be used, it is apparent that an erroror fraudulent activity has occurred. The terminal device 12 isprogrammed so it will not process further transactions with the card. Ofcourse, in other embodiments other approaches and smart card schemes forstoring value and other information may be used.

In the preferred embodiment of the system a customer is enabled to loadand unload data representative of value to the integrated circuit chipon the smart card. In a preferred embodiment of the system, the smartcards used in connection with terminal device 12 include not only anintegrated circuit chip on the card, but also a magnetic stripe. Themagnetic stripe has the data which is indicative of the customer'scredit card account. One form of such cards is the VISA™ Cash Card (VCC)which is available from VISA International.

A customer wishing to load data representative of cash value to theintegrated circuit chip on their card, is enabled to do so by chargingthe cash value to the credit card account associated with the card.Alternatively, the customer is enabled to load value to their smart cardfrom a separate account. This is accomplished by the customer using theseparate debit or credit card associated with that account.

Similarly, a system may be used by the customer to unload value storedon the integrated circuit chip of their smart card. This value may beunloaded and credited to the customer's account corresponding to thedata on the magnetic stripe of the customer's smart card. Alternatively,the value may be unloaded from the smart card into a different accountassociated with another credit or debit card. The system 10 is alsooperative to enable a customer to perform balance inquiries. Thesebalance inquiries enable a customer to check the amount of value held ontheir smart card. This system may also be used to determine the moneyavailable in “funds accounts” from which value may be transferred to thesmart card. In the case of a VISA™ Cash Card, one of these fundsaccounts includes the credit card account associated with the smart cardand which account corresponds the data for which is encoded on themagnetic stripe.

The memory 28 of terminal device 12 is programmed with computer softwarewhich is executed by processor 26. The transaction flow which is enabledto be carried out by the software is schematically represented in thesteps shown in FIGS. 5 through 15. The displays which the processor 26causes to be displayed on screen 16 in response to these program stepsare also shown. As previously discussed, the memory 28 of the terminaldevice 12 also includes data representative of the configuration datashown in FIGS. 3 and 4. This data enables the terminal device to carryout the transaction flow processes.

The typical transactions conducted using the system 10 are nowdiscussed. These transactions typically include: loading value on to acustomer's smart card from a funds account of the customer; unloadingvalue from a smart card to the customer's funds account; making abalance inquiry concerning a funds account; and conducting an inquiryconcerning the amount of value remaining on the integrated circuit chipof the smart card.

As shown beginning with reference to FIG. 5, a typical transaction flowusing the system will begin with a customer approaching the terminaldevice 12. The terminal device will present the display shown at step0.0 a in FIG. 5. At power up the terminal will check for certainconditions at steps 0.0 b through 0.9. If everything is functioningnormally in the system, terminal device 12 is operated under the controlof processor 26 to present the display shown at step 0.10 in FIG. 7 onscreen 16 when a customer approaches.

A customer initiating a load transaction begins by inserting their cardinto the card reader 22 at step 0.11. At step 1.0 the terminal checks todetermine if the card has a valid integrated circuit chip as well as avalid magnetic stripe. As indicated at step 1.0, if the card has a validintegrated circuit chip with valid data, or a magnetic stripe with validaccount data, the processor 26 operates the terminal device to displaythe screen shown at step 1.1. For purposes of this example it will beassumed that the card presented by the customer has both a valid chipand a valid account number on the magnetic stripe.

At step 1.1 a prompt message is presented on the screen 16 prompting thecustomer to input their PIN through keypad 20. Once the customer inputstheir proper PIN and pushes the “enter” key on the keypad, the processorexecutes step 1.5 in FIG. 8 and checks the status of receipt printer 30.If the processor 26 senses that the printer 30 is workingsatisfactorily, the processor next executes step 1.7 to check anddetermine if a valid chip was sensed on the card. In this example such achip is present and the processor will move to step 2.0 shown in FIG. 9.

At step 2.0 the processor is operative responsive to the configurationdata stored in its memory 28 to present the display shown on screen 16.This display prompts a customer to select the type of transactiondesired. In the case of a load transaction in which value is to beloaded on to the integrated circuit chip of the smart card, the customerpresses the function button 18 indicated as button F7 in FIG. 2. Inresponse to the customer making this selection the processor proceeds tostep 4.0 a shown in FIG. 12.

At step 4.0 a a user is prompted by a display on screen 16 to indicatewhere cash value is to be loaded from. The options include thecustomer's checking account, savings account or credit card. In responseto the customer selecting an account, the processor will next move tostep 4.1 in this example because the card includes a valid integratedcircuit chip of the VISA™ cash type. At step 4.1 a display is presentedon screen 16 which questions the customer concerning whether the valuethat is to be loaded is to be loaded to the card that is presently inthe terminal device or to a different card. This is because the customerhas the option of loading cash to the integrated circuit chip directlyfrom the account corresponding to the data on the magnetic stripe of theVISA™ Cash Card. Alternatively, the customer may load value from theaccount corresponding to the data on the magnetic stripe of the smartcard to a different magnetic stripe card.

For purposes of this example and to demonstrate the versatility of thissystem, it will be assumed that in response to the prompt presented atstep 4.1 in FIG. 12, the customer chooses to load value to a differentsmart card. The customer presses the button 18 corresponding to F7. Inresponse to this selection the processor moves to execute step 4.2 atwhich the display on screen 16 prompts the customer to take the firstcard which is delivered out of the card reader 22 and insert the newsmart card to which value is to be loaded. At step 4.2, in response tothe insertion of a new card, the device checks for a valid chip.Assuming that value can be loaded to the card, the processor then moveson to execute step 4.5.

At step 4.5 the processor is operative to display on screen 16 theprompt message shown. This prompt indicates the current value on thesmart card to which additional value is to be loaded. It also indicatesthe maximum amount that the customer is permitted to load to the card.The screen presents the customer with the option of loading the maximumamount or entering a numerical amount. For purposes of this example itwill be assumed that the customer enters a numerical amount using thekeypad, in which case the processor moves to step 4.6. If the amount isvalid, the processor then moves to step 7.0 shown in FIG. 13.

At step 7.0 the processor is operative to cause the modem 36 to dial thephone number for the host computer associated with the customer'saccount which is to be charged or debited for the value loaded on to thesmart card. The information on the number to dial is derived based onthe identifying data concerning the customer's bank or credit cardissuer in the magnetic stripe data of the card to be charged. Theterminal device 12 resolves the phone number based on the data stored inits memory and contacts the appropriate transaction host that canauthorize the transaction, or which has a network connection to anotherhost that can authorize the transaction. For purposes of this example itwill be assumed that host 46 is the transaction host.

It should be noted that at step 7.0 terminal device 12 is configured tocompensate for failed attempts to reach the appropriate transactionhost. As indicated at step 7.0 in FIG. 13, three attempts are made bythe terminal to successfully contact the transaction host before anerror is indicated. Of course in other embodiments other approaches maybe used.

In response to successfully connecting to the transaction host, theterminal 12 transmits a request message to the host. This requestmessage has the format and content layout shown in the table in FIGS. 21and 22. It should be noted that this request message includes variousitems of information including customer account data, input PIN data, aswell as the type of transaction requested. In addition, the smart cardsignature data shown in FIG. 22 related to the integrated circuit on thecard is also transmitted. It should be understood that the transactionmessage is preferably sent in encrypted form through the telephonenetwork to the transaction host. Encryption is done in accordance withkeys which are stored in the memory 28 of terminal 12 and which may bechanged on a periodic basis. The proper method of encryption for atransaction message destined for a particular authorization host isdetermined by the terminal 12 based on the FIT table data stored in itsmemory.

In response to receiving a proper request message the transaction host,in this case host 46, sends a response message to the terminal device12. The response message is operative to indicate to the terminal 12whether or not the transaction is permitted. The format and contentlayout of the response message is shown in FIG. 23. The response messageincludes a next “state” or step which indicates to the processor interminal device 12 whether or not to go forward with the transaction.

Upon receiving the response message from the transaction host, theprocessor 26 in the terminal device 12 executes step 7.1 to check thestate in the response message. Assuming that the state indicates thatthe transaction is to go forward, the processor next goes to step 8.0shown in FIG. 14. At step 8.0 the processor checks to determine thenature of the transaction. For purposes of this transaction example aload transaction to a smart card is being conducted. As a result, theprocessor 26 sends signals to the card reader 22 which are operative tochange the data stored on the integrated circuit chip of the smart cardto increase the cash value data therein.

At step 8.0 the terminal device 12 is operative to send a transactioncompletion message to the authorization host. This indicates to thetransaction host that the transaction contemplated was successfullycompleted and that the value was transferred to the customer's card. Thecompletion message has the format and content layout shown in FIG. 24.

After the value on the card has been updated, the processor next movesto step 8.2. In this step the transaction data is stored in the memory28. After the data is stored in the memory the processor moves to step9.0.

At step 9.0 the processor operates the receipt printer to print areceipt for the customer. At the same time a comparable record isprinted on paper by the journal printer 34. In the preferred embodimentthe journal printer is operative to make a record of the transactioneven if a paper receipt is not provided to the customer. It should benoted at step 9.0 that the terminal may be configured so as to promptthe customer as to whether they wish to have a receipt or not. Assumingfor purposes of this transaction that the customer is always providedwith a receipt, the processor then proceeds to step 9.2 in which thereceipt is printed. The journal printer also operates to print the sameinformation simultaneously. In alternative embodiments the journalprinter may not be included in the terminal device. In such embodimentsall records are stored electronically in memory.

An example of the format for a receipt provided to the customer inresponse to a load transaction is schematically shown in FIG. 16. Theterminal is configured to print the information appropriate for thetransaction which has been carried out. For example, if the smart cardwas loaded from a debit card account, that is indicated by printing theline “cash withdrawal to card”. The alternative line that would beprinted when the smart card is loaded using a credit card is not printedin this example. Similarly, if the smart card was loaded from funds in achecking account, that line would be printed and the alternative lineindicating that the smart card was loaded from a savings account wouldnot be printed.

After printing the receipt the processor next executes step 9.3. In thisexample the card in the terminal 12 which has been loaded withadditional value on its integrated circuit chip, is also a magneticstripe card. The stripe contains information concerning an account whichmay be charged. The processor moves to step 9.4 in which the customer isprompted as to whether they want another transaction. Assuming that thecustomer does not wish to conduct another transaction, a button 18corresponding to F8 is pressed. The processor next executes step 9.8 toeject the card from the card reader and the processor displays the“thank you” message shown at step 10.0. This completes the loadtransaction.

The flow of messages between the terminal device 12 and the transactionhost is schematically shown in FIG. 20. The arrows therein represent themessages that are passed back and forth. It should be noted that whilethe primary messages exchanged between the terminal device and thetransaction host include the request, acknowledgment and completionmessages, the transaction host is also operative to exchange pollingmessages and acknowledgment messages with the terminal. In the preferredembodiment these polling and acknowledgment messages are carried out inaccordance with the Burroughs Poll Select protocol and the format andcontent layout of polling messages are schematically represented in FIG.25.

An unload transaction where value is transferred from the integratedcircuit chip on the card to an account is now described. The transactionproceeds through the steps shown in FIGS. 5 through 8 in the mannerpreviously discussed in the description of the load transaction. Uponthe processor reaching step 2.0 in FIG. 9, a customer presses the F8function button to unload the card. In response to pressing the buttoncorresponding to an unload transaction, the processor proceeds to step3.0 in FIG. 10.

At step 3.0 a determination is made whether the card is one which thesystem is able to process. This is done based on whether the card datafor the particular institution corresponds to an institution in thefinancial institution table (FIT) in memory 28 of the terminal device.This determines whether the terminal can process the transaction.

Assuming that the card is from an institution which corresponds to anentry in the FIT and can be processed, the processor next moves to step3.4. At step 3.4 the display prompts the customer to indicate theaccount into which they wish to unload the funds from the card. Theoptions include a customer's checking account, savings account or creditcard. In response to the user inputting a selection, the processor 26 isoperative to determine if the card in the machine is a VCC card whichindicates that the card is associated with an institution for whichtransactions can be processed in the system. This is based on the bankidentification number stored on the card and the BIN table stored inmemory 28. For purposes of this example it will be assumed that there isa valid integrated circuit chip on the card that can be processed in thesystem. The processor then determines if the cash value represented onthe card is greater than the minimum value. Assuming that there issufficient value above the minimum established in the terminal ascapable of being unloaded, the processor next moves to execute step 3.5.

At step 3.5 the processor operates the terminal device to display on thescreen 16 a prompt which asks the customer whether they wish to unloadvalue from the card that is in the terminal device, or from a differentsmart card. For purposes of this example it will be assumed that thecustomer wishes to unload value from the card in the terminal device,which the customer indicates by pressing the F8 button. In response theprocessor proceeds to step 3.9. At step 3.9 the processor is operativeto display a prompt which questions the customer concerning the amountto be unloaded from the card. The customer has the option of unloadingall of the value or a numeric amount. For purposes of this example itwill be assumed that the customer enters a numeric amount through thekeypad, in which case the processor proceeds to step 3.10.

At step 3.10 the processor operates the terminal to display a promptwhich includes the amount entered by the customer through the keypad asthe amount to be unloaded from the card. Assuming that the amountentered by the customer is an amount permitted by the system, theprocessor next proceeds to step 7.0.

At step 7.0 the processor is operative to control the modem to dial theappropriate transaction host. Upon connecting to the appropriate hostthrough the telephone system 40 the terminal device sends a requestmessage. The request message has the content and format layout describedin FIGS. 21 and 22. Assuming that the request message is proper thetransaction host returns a response message to the terminal device. Theresponse message is received at step 7.1.

The response message sent by the transaction host has the format andcontent layout shown in FIG. 23. The response message also includes a“next state” indicator which indicates to the processor 26 of theterminal device the next action to take. Assuming that the responsemessage is consistent with an authorized transaction, the processor nextmoves to step 8.0.

At step 8.0 the processor is operative to update the card. In the cageof an unload transaction, the data on the card is changed to reduce thevalue on the integrated circuit chip. The amount that the datarepresentative of value is reduced corresponds to the amount transferredto the selected account of the customer. If the terminal devicesuccessfully updates the card, the terminal device operates to send acompletion message to the transaction host having the format and contentlayout shown in FIG. 24. The processor proceeds to step 8.2.

At step 8.2 the processor 26 is operative to save the transactioninformation in the memory 28. Transaction data is stored along withtotals and statistics calculated by the processor. In the preferredembodiment each transaction is associated with a sequential number. Theprocessor is also operative to increment the transaction number so thatthe next transaction will be associated with the next number in thesequence. After updating the data stored in the memory 28, the processorproceeds to step 9.0.

At step 9.0 the processor is operative to check the configuration datastored in memory to determine if a receipt is to be printed. Forpurposes of this example it will be assumed that a receipt is to beprinted and the processor proceeds to step 9.2. At step 9.2 theprocessor controls the receipt printer 30 to print a receipt. At thesame time the receipt is printed the journal printer 34 prints similarinformation which is stored in hard copy form in the terminal.

The types of information printed on a receipt for an unload transactionis shown in FIG. 17. FIG. 17 shows the various lines of information thatmay be printed on an unload receipt. Of course, only those linescorresponding to the particular transaction that has been accomplishedare printed.

After printing the receipt for the unload transaction, the processornext moves to step 9.3 in which a determination is made as to whetherthe card in the terminal device is a funds card. In this example it is,in which case the processor proceeds to step 9.4. In step 9.4 thecustomer is prompted to indicate to the terminal device whether he orshe wishes to conduct another transaction. For purposes of this exampleit is assumed that the customer selects not to conduct anothertransaction which is done by pressing the F8 function button. Inresponse to the F8 function button being pressed the processor proceedsto step 9.8 in which case the customer's card is delivered out of theterminal device from the card reader 22. The processor then operates theterminal to display the “thank you” screen shown at step 10.0.

It should be noted that the flow of messages from the terminal device tothe transaction host during the unload transaction is similar to that inthe load transaction is schematically represented in FIG. 20. A similartransaction flow is employed when a customer uses the terminal device toinquire as to the balance in their checking, savings or credit cardaccount which account can be used to load or unload funds. A fundsaccount balance inquiry transaction is now explained with reference tothe transaction flow in FIGS. 5 through 15.

The steps associated with a customer's balance inquiry for a fundsaccount will be the same initially as those that previously described upthrough step 2.0 in FIG. 9. At this step, when the customer wishes tocheck the balance in a funds account, the customer presses functionbutton F5. In response to this selection the processor moves to step5.0. At step 5.0 the processor operates the terminal device to present aprompt on the screen which asks the customer to select the account towhich the balance inquiry is directed. In response to the customerselecting an account, the processor moves to step 7.0. At step 7.0 theterminal device operates to have the modem 36 dial the appropriatetransaction host for the account of the customer. Upon communicatingwith the transaction host the terminal device sends the request messagehaving the format and content layout shown in FIGS. 21 and 22.

In response to receiving the request message the transaction hostreturns a response message having the format and content layout shown inFIG. 23. The processor 26 is operative to check the state information inthe response message, and assuming that the response message includes astate value that indicates that the inquiry transaction should goforward, the processor next moves to step 8.0 in FIG. 14.

At step 8.0 the processor is operative to check if the transactionrequest was for an account balance inquiry. If so, the processor movesto step 9.0 and at step 9.0 the processor determines if the terminal isconfigured to print a receipt for the customer. For purposes of thisexample it is assumed that the terminal is configured to provide thecustomer with a receipt automatically and the processor next moves tostep 9.2.

At step 9.2 a receipt is printed for the customer showing the balance inthe account which was selected. A layout of a form printed by theterminal device and provided to the customer is shown in FIG. 19. Ofcourse, as with the other sample forms only those lines pertaining tothe particular transaction are printed. While the transaction receipt isbeing printed for the customer, the journal printer 34 prints aninternal record of the balance inquiry.

After completing the printing, the processor is operative to determineif the customer's card in the card reader is a funds card. If so, theprocessor moves to step 9.4 in which the terminal device is operative toprompt the customer through the screen 16 as to whether the customerwishes to conduct another transaction. Assuming that the customer doesnot wish to conduct another transaction the processor next moves toeject the card at step 9.8 and to present the courtesy “thank you”screen at step 10.0.

A further type of exemplary transaction that can be conducted throughthe system is a card balance inquiry in which a customer requests toknow how much value is represented on the integrated circuit chip ontheir smart card. As will now be appreciated, this type of transactiondoes not require the terminal device 12 to contact a transaction hostbecause this information can be determined directly from the card.

The process flow through a transaction in which a customer conducts acard balance inquiry proceeds in the manner of the previously describedtransactions through step 2.0 in FIG. 9. At step 2.0 if the customerwishes to know the card balance, he or she presses the F6 functionbutton. In response to the customer's input the processor is operativeto read the value on the card and proceeds to step 2.7.

At step 2.7 the processor determines if the printer 30 is operating. Forpurposes of this example it is assumed that the printer is working andthe processor moves to step 2.8.

At step 2.8 the current balance represented by the data on the smartcard is displayed to the customer. The customer is also prompted toindicate whether they wish to print a transaction log or whether theywish to return to step 2.0, the main menu or exit. For purposes of thisexample it will be assumed that the customer presses the F6 functionbutton to print a transaction log, and the processor moves to step 6.0.

At step 6.0 the processor 26 is operative to read the integrated circuiton the card to determine if there is a log of purchase data recordedtherein. In the preferred embodiment of the invention data related topurchase transactions carried out by the customer using the card arestored on the card. This data may include, for example, amounts ofpurchases and the names of merchants from whom the purchases were made.In alternative embodiments this stored information may also includeadditional information concerning goods or services that have beenpurchased. The transaction log preferably also includes informationabout unsuccessful purchase attempts that the customer may have madeusing their card, and data concerning this is also recorded. Records ofload transactions and unload transactions and the particular accountsfrom which and to which money was transferred, preferably are alsorecorded on the card.

At step 6.0 the processor 26 is operative to determine if there is a logof data recorded on the integrated circuit chip of the card. If so, theprocessor moves to step 9.2. At step 9.2 the printer 30 is operative toprint the transaction log from the card for the customer. The journalprinter 34 is also operative to make a record of what is printed. Ofcourse, in other embodiments because this transaction does not involve atransaction of funds, the journal printer may be operated by theprocessor to indicate only that the customer printed a transaction log.

The partial format for a printed receipt form for a card balance inquirywithout the transaction log data is shown in FIG. 18. Of course, in anactual form the data taken from the integrated circuit chip will also beprinted as part of this transaction log.

After completing the printing at step 9.2, the processor 26 is operativeto move to step 9.3 at which a determination is made as to whether thecard in the card reader is a funds card. For purposes of this example itis assumed that it is a funds card, and the processor moves to step 9.4.At step 9.4 the customer is again prompted to indicate whether they wishto conduct another transaction. Assuming that the customer indicatesthat they do not wish to conduct another transaction by pressingfunction button F8, the processor is operative to eject the card at step9.8 and to display the courtesy “thank you” screen shown at step 10.0.

While the load, unload, funds account inquiry and card balance inquirytransactions are examples of transactions that may be carried outthrough the system of the present invention, it should be understoodthat these transactions are exemplary and that the system may also beconfigured to carry out other types of transactions using smart cards,magnetic stripe cards or other types of access cards.

As transactions are conducted using the system, information concerningthe transactions that have been conducted at a terminal device 12 isstored in memory 28. To properly distribute funds among the operators ofthe various transaction hosts, the operator of the terminal devices, andcustomers who use the terminal devices, settlement must eventually beaccomplished. In order to achieve settlement the terminal device isconfigured to forward its settlement data on a periodic basis to adesignated host computer referred to as a settlement host. Thissettlement host and its associated phone number, as well as the date andtime for settlement, are among the configurable data for the terminaldevice. This is represented, for example, in FIGS. 3 and 4 by locationnumbers 7 through 10 and 13 through 16. Of course, as indicted in thetables shown in these Figures, an alternative host computer isdesignated for settlement in the event that the first choice is notavailable.

A common time for settlement is at the end of each business day. Thetransaction flow between the terminal device and the settlement host isgraphically represented in FIG. 26. In accordance with the terminalconfiguration, when the time arrives to accomplish settlement timeprocessor 26 is operative to cause the modem 36 to dial the settlementhost based on the data stored in the memory 28. Upon successfullycontacting the host the terminal device is operative to send asettlement message to the host. After having sent the settlement messageto the host, the terminal device disconnects.

The settlement message generally has the layout shown in FIG. 27. Asindicated therein the settlement message is divided into various typesof data records which correspond to particular types of transactions.Each group of data records is preceded by a batch header record for thatgroup, and is followed by a batch trailer record for that particulargroup. In the preferred embodiment of the invention the data recordsinclude card issuance and refund transactions, goods and servicestransactions and card reload transactions.

The batch header record format for card issuance/refund transactions isshown in FIG. 28. The trailer record format for this group oftransactions is shown in FIG. 31. The format and content layout of eachtransaction associated with card issuance or refund is shown withreference to FIGS. 29 and 30. It should be understood that the datashown in FIGS. 29 and 30 is present for each of the transactions ofthose types that have been conducted.

For goods and services transactions the header record format is shown inFIG. 32 and the trailer record format is shown in FIG. 34. The formatfor the records that are included in the settlement message for eachtransaction are shown in FIG. 33.

Similarly, the format used in the preferred embodiment for the batchheader records associated with card reload transactions is shown in FIG.35 and the trailer record format is shown in FIG. 37. The data recordformat associated with each of the transactions is shown in FIG. 36.

It should be understood that in the case of the terminal device 12, therecords will consist of card issuance and refund transactions and cardreload transactions. This is because the customers are not enabled tomake purchases of goods or services through the terminal device.However, if the system were modified in a way such that the customercould purchase goods or services at the device, then such records couldin alternative embodiments be included. It should also be noted thatprocessor 26 is operative to maintain the transaction types separate andto sequentially number each transaction of each particular type. Thisfacilitates building and sending the settlement message to thesettlement host.

After receiving the settlement message data, the terminal devicedisconnects from the settlement host. The host proceeds to process thedata so as to appropriately charge and credit the accounts of theparticipants in the system.

It should be noted that in the preferred embodiment of the presentinvention the terminal device is operative to initiate all contacts withthe host computer through the phone system 40. As the terminal devicedoes not receive incoming telephone inquiries, this minimizes the riskthat persons will try to break into the terminal for nefarious purposes.In addition, the messages sent by the terminal through the phone systemare preferably encrypted in accordance with designated known encryptionprograms and certain encryption keys. The encryption programs are storedin memory and the keys are stored as part of the terminal configuration.The keys are preferably periodically changed. The configuration key datais shown in the table in FIGS. 3 and 4 as associated with items 24through 26.

A further fundamental advantage of the present invention is that anoperator of the terminal device who is the systems administrator isenabled to readily configure the terminal with the values andinformation necessary for it to carry out proper operation. In thepreferred embodiment, this can be done by the systems administratorusing a smart card which has a memory which has a memory which includesall the terminal configuration data stored thereon. In addition, thesystems operator is enabled to copy configuration data from the terminaldevice to a card so that the same configuration data may be loaded intoother terminals. This may be valuable when the systems operator hasseveral terminal devices that need to be programmed in the same manner.The terminal devices of the system also enable a systems operator tocarry out settlement functions and other administrative functionsmanually as well as to print various types of reports.

The transaction flow for administrative functions that can be carriedout at the terminal device 12 of the preferred embodiment are shown withreference to FIGS. 38, 39, 41, 42, 43, 45, 47, 49, 50, 51, 53, 54, 56,57, 58, 60, 61, 63, 64, 66, 67 and 69. Of course, in alternativeembodiments additional functions or a lesser selection of functions maybe provided.

The transaction flow through which a system administrator gains accessto the administrative functions of the terminal are represented by thesteps and screen displays shown in FIGS. 38 and 39. These steps arecarried out by the processor 26 in accordance with data stored in thememory 28. As shown in FIGS. 38 and 39, the systems administrator gainsaccess through entry of a password to the terminal. This password may bechanged once the administrator has entered the proper password. Afterthe proper password is entered, the processor 26 is operative to displayon screen 16 a list of administrative functions which are available.This list of administrative functions is shown in FIG. 40.

The various administrative functions will now be described. If thesystem administrator determines that the clock device within theterminal which tracks the time and date of transactions needs to be set,this is done in accordance with the portion of the transaction flowshown in FIG. 42. Another function that can be carried out by theadministrator is to have a terminal device immediately send a settlementmessage to the transaction host. This is done by the systemsadministrator selecting the batch upload function and the processor 26carrying out the steps shown in FIG. 41. Another function that can becarried out is to have the terminal device print a detail report of thetransactions. This portion of the transaction flow is represented inFIG. 43 and a format for a report of the type that is printed is shownin FIG. 44.

Another administrative function which may be selected is to have theterminal device print a report of statistics. The step of printing sucha report under the control of processor 26 is represented in FIG. 45 anda sample format for a report printed by the printer 30 of the terminalis shown in FIG. 46.

A further administrative function which may be selected is to have theterminal print totals of transactions that have been conducted. This isrepresented by the portion of the transaction flow shown in FIG. 47. Asample report which is printed during this operation is shown in FIG.48. If the systems administrator wishes to clear the records oftransactions totals and statistics which are currently being stored inmemory 28 of the terminal, the portion of the transaction flow shown inFIG. 49 is carried out.

The administrative functions also enable the administrator to review theconfiguration data stored in the memory 28 of the terminal and to modifythe configuration data. The transaction flow associated with theadministrative function which accesses terminal configuration data isshown in FIG. 50. If the system administrator wishes to have theterminal print the configuration data, this administrative function maybe selected and the terminal will carry out a printing operation inaccordance with the portion of the transaction flow shown in FIG. 51.The sample report format for the configuration data which is printed inthe preferred embodiment is shown in FIG. 52.

In accordance with the exemplary customer transactions previouslydiscussed, the processor is operative to cause screen 16 to presentvarious types of displays or prompts to the customer. These promptsinstruct the customer to make certain selections. The administrator isenabled to access the prompt configuration data through the portion ofthe transaction flow shown in FIG. 53. A further administrative functionwhich includes the portion of the transaction flow shown in FIG. 54,enables the administrator to print the prompt configuration. The promptconfiguration report format printed by the terminal is represented inFIG. 55.

As also discussed in accordance with the exemplary transaction flows forloading and unloading value, from a smart card, the response messagessent by the transaction host include a state number which is indicativeof whether the transaction will go forward. If for some reason thetransaction cannot be carried out, the response message from thetransaction host will include a state number which does not allow thetransaction to go forward. What the terminal device does in response tostate numbers in response messages which indicate an “error”, isdetermined by error configuration data stored in the memory 28 of theterminal. The system administrator is enabled to access the errorconfiguration and to change what the terminal device does in response toreceiving the state data through the transaction flow portion shown inFIGS. 56 and 57. The system administrator is also enabled to select theadministrative function to print the error configuration data which isrepresented by the portion of the transaction flow shown in FIG. 58. Theerror configuration report which is printed has a format shown in FIG.59.

As previously discussed with reference to load and unload transactions,the configuration data within the terminal device 12 also includesinformation on whether the accounts associated with the customer's smartcard, credit card or debit card is one that the system can process. Thisis determined in accordance with configuration data stored in theterminal. FIG. 60 shows the transaction flow associated with theadministrative function in which the administrator stores in theterminal device the bank institution number (BIN) for the institutionswhose smart cards can be processed by the terminal. In the case of thepreferred embodiment, these values correspond to the VISA™ Cash Cards(VCC). The administrative function associated with printing the “on us”configuration data is shown with reference to the portion of thetransaction flow shown in FIG. 61. The format of the report printed withthis configuration data is shown in FIG. 62.

As was previously explained, the processing of load and unloadtransactions also involves determining whether the system can processtransactions involving accounts at institutions whose identities areindicated in the magnetic stripe data. This data also indicates themanner in which the data must be encoded or encrypted in order to beproperly decoded by the transaction host. As previously described inconnection with the exemplary transactions, this involves the financialinstitution table (FIT) data stored in the memory 28. An administrativefunction available in the preferred embodiment enables the systemadministrator to access this configuration data. The portion of thetransaction flow associated with accessing and changing this data isrepresented in FIG. 63. The system administrator is also enabled toprint a report of the FIT configuration data and this is represented bythe portion of the transaction flow shown in FIG. 64. The report printedby the terminal device concerning this data has the format shown in FIG.65.

A fundamental advantage of the preferred embodiment of the presentinvention is that configuration data may be stored in a memory on anadministrator's smart card. A table showing the configuration data whichmay be stored on a card is shown in FIG. 68. One of the administrativefunctions available in the terminal device enables the administrator toread the terminal configuration data that is stored on anadministrator's smart card. This is accomplished through the portion ofthe transaction flow shown in FIG. 66. An administrator is also enabledto update the terminal configuration for the terminal device based onthe configuration data read from the card. An administrative functionalso enables an administrator to print out a report from the printer 30of the terminal device showing the configuration data printed on theadministrator's card. This is represented by the portion of thetransaction flow shown in FIG. 67.

To facilitate an administrator's ability to program other terminaldevices quickly, an administrator is also enabled in the preferredembodiment of the invention, to write the terminal configuration datastored in a terminal device to the memory on a smart card. This iscarried out through a portion of the transaction flow shown in FIG. 69.Once the administrator has copied the terminal configuration data on toa smart card, the administrator may then use the same card to programother terminal devices in a similar manner. This approach may also beused with various types of terminal devices such as ATMs, POS terminalsand other terminals which may be programmed in a similar manner.

Of course, the foregoing administrative functions are exemplary andother types of administrative functions may be provided in otherembodiments.

As will be appreciated from the foregoing discussion, the preferredembodiment of the system of the present invention provides a versatilesystem for loading and unloading value from smart cards whiletransferring value between accounts. The card operates as a “purse” fromwhich money can be taken and into which money may be added. The systemalso uses a unique series of transaction message formats that aresuitable for communicating the data necessary to carry out thetransactions accomplished by the system. This includes both customertransactions as well as settlement between the participants in thesystem.

Thus, the new electronic purse card value system of the preferredembodiment of the present invention achieves the above-statedobjectives, eliminates difficulties encountered in the use of priordevices and systems, solves problems and attains the desirable resultsdescribed herein.

In the foregoing description certain terms have been used for brevity,clarity and understanding, however no unnecessary limitations are to beimplied therefrom because such terms are for descriptive purposes andare intended to be broadly construed. Moreover, the descriptions andillustrations herein are by way of examples and the invention is notlimited to the details shown and described.

In the following claims any feature described as a means for performinga function shall be construed as encompassing any means capable ofperforming the recited function and not merely the means described inthe foregoing description as performing the recited function, or mereequivalents thereof.

Having described the features, discoveries and principles of theinvention, the manner in which it is constructed and operated and theadvantages and useful results attained, the new and useful structures,devices, elements, arrangements, parts, combinations, systems,equipment, operations and relationships are set forth in the appendedclaims.

We claim:
 1. A method comprising the steps of: storing a first value in a first area of a card memory of a smart card, the first value representative of a first type of data; storing a second value in a second area of the card memory, the second value representative of a second type of data; calculating a third value, the third value being a function of both the first value and the second value; and storing the third value in the card memory of the smart card as an integrity check.
 2. The method according to claim 1 and further comprising the steps of: reading the first, second and third values from the card memory with a terminal device; enabling further operation of the terminal device responsive to the third value read from the smart card corresponding to both the first and second values read.
 3. The method according to claim 1 wherein the first type of data is representative of a whole currency amount, and the second type of data is representative of a partial currency amount, and wherein in the calculating step the third value is a function of both the whole currency amount and the partial currency amount.
 4. The method according to claim 3 and further comprising the steps of: reading the first, second and third values from the card memory with a terminal device; determining with the terminal device that the third value read from the card corresponds to the first and second values read from the card; receiving a first unload instruction input at the terminal device; receiving a first unload value input at the terminal device, the first unload value input including a first whole currency amount; and changing the first memory area of the card with the terminal device to include a new first value, the new first value corresponding to the first value increased by the first whole currency amount.
 5. The method according to claim 4 further comprising the steps of: calculating a new third value with the terminal device, the new third value being a function of both the new first value and the second value; and storing the new third value in the card memory of the smart card.
 6. The method according to claim 3 and further comprising the steps of: reading the first, second and third values from the card memory with a terminal device; determining with the terminal device that the third value read corresponds to the first and second values read; receiving a first load instruction input at the terminal device; receiving a first load value input at the terminal device, the first load value input including a first whole currency amount; and changing the first memory area of the card with the terminal device to include a new first value, the new first value corresponding to the first value increased by the first whole currency amount.
 7. The method according to claim 6 further comprising the steps of: calculating a new third value with the terminal device, the new third value being a function of both the new first value and the second value; and storing the new third value in the card memory of the smart card.
 8. The method according to claim 1 wherein the first area of the card memory includes a first plurality of first bits, and wherein each of the first bits represents a first monetary unit value, and wherein the first value comprises a first number of first monetary units, and wherein the step of storing the first value includes changing the first bits to correspond to the first number of first monetary units comprising the first value.
 9. The method according to claim 8 wherein the second area of the card memory includes a second plurality of second bits, and wherein each of the second bits represents a second monetary unit value, and wherein the second value comprises a second number of second monetary units, and wherein the step of storing the second value includes changing the second bits to correspond to the second number of second monetary units comprising the second value.
 10. The method according to claim 9 wherein the first monetary unit value corresponds to dollars and the second monetary unit value corresponds to cents, wherein in the calculating step the third value is a function of both dollars and cents represented in the smart card memory.
 11. The method according to claim 1 wherein the first type data is representative of a first currency amount and the second type data is representative of a second currency amount, and further comprising the steps of: reading the first, second and third values from the card memory with the terminal device; determining with the terminal device that the third value corresponds to both the first and the second values; receiving an unload all instruction at the terminal device; and changing both the first memory area and the second memory area of the card to correspond to a zero value.
 12. The method according to claim 11 and further comprising the step of generating an unload message with the terminal device, the unload message including an unload value representative of the sum of the first and second currency amounts.
 13. The method according to claim 1 wherein the first type data is representative of a first currency amount and the second type data is representative of a second currency amount, and further comprising the steps of: storing a maximum permissible total card value in a terminal memory of a terminal device; reading the first, second and third values from the card memory with the terminal device; determining with the terminal device that the third value corresponds to both the first and second values read from the card; receiving a maximum load instruction at the terminal device; and changing both the first memory area and the second memory area of the card to data representative of a new first currency amount and a new second currency amount respectively, wherein a sum of the new first currency amount and the new second currency amount is equal to the maximum permissible total card value.
 14. The method according to claim 13 and further comprising the steps of: calculating a new third value with the terminal device from both the new first value and the now second value; and storing the new third value in the card memory of the smart card.
 15. The method according to claim 13 and further comprising the step of generating a load message with the terminal device, the load message including a load value representative of a difference between the maximum permissible total card value and a further sum, wherein the further sum corresponds to the first currency amount plus the second currency amount. 